CVE-2026-74449drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport If a plane reaches calculate_mcache_setting with a zero-area viewport, calculate_mcache_setting exits early with num_mcaches == 0 and mvmpg_width/height == 0. This will cause a divide-by-zero panic and can also cause an underflow on num_mcaches. Fix this by changing calculate_mcache_setting to bool and adding guards after each calculate_mcache_row_bytes call. If num_mcaches or mvmpg_width/height is zero, return a false. Callers will propagate the failure as a rejected mode, which prevents the panic. (cherry picked from commit 29c0f7c655f47bcbd575ff75e58480df6ec3c9da)
- CVSS
- 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 70839da6360500a82e4d5f78499284474cbed7c1 builds before 23a541c31b45fa813b33269376f6bd53535429a8; 70839da6360500a82e4d5f78499284474cbed7c1 builds before 1f93537881fd22712732a60ad12572a3fd40c0ec; from 70839da6360500a82e4d5f78499284474cbed7c1 before f327e389c07cfc3a2f6ff54f6214e1a52d457edc | CNA record |
References
- https://git.kernel.org/stable/c/23a541c31b45fa813b33269376f6bd53535429a8
- https://git.kernel.org/stable/c/1f93537881fd22712732a60ad12572a3fd40c0ec
- https://git.kernel.org/stable/c/f327e389c07cfc3a2f6ff54f6214e1a52d457edc
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.